CVE-2023-1034mediumCWE-29

CVE-2023-1034: falha de média gravidade em salesagility/suitecrm

Path Traversal: '\..\filename' in salesagility/suitecrm

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar salesagility/suitecrm

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

18Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.3epss 26%
Path Traversal: '\..\filename' in GitHub repository salesagility/suitecrm prior to 7.12.9.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
salesagility · salesagility/suitecrm
CVEs relacionadas — salesagility/suitecrm

No mesmo produto, das mais perigosas para as menos.

CVE-2023-5350MEDIUMSQL Injection in salesagility/suitecrmEPSS 2.2%CVE-2023-6131HIGHCode Injection in salesagility/suitecrmEPSS 1.0%CVE-2023-6130HIGHPath Traversal: '\..\filename' in salesagility/suitecrmEPSS 1.0%CVE-2022-0754HIGHSQL Injection in salesagility/suitecrmEPSS 0.8%CVE-2023-6125MEDIUMCode Injection in salesagility/suitecrmEPSS 0.8%CVE-2023-6126MEDIUMCode Injection in salesagility/suitecrmEPSS 0.7%